Thorsten Rinne phpMyFAQ Cross-site Scripting Vulnerabilities

Thorsten Rinne’s phpMyFAQ version prior to 4.2.0-beta and 4.2.0-alpha versions contained a cross-site scripting vulnerability. This vulnerability stemmed from a storage-based cross-site scripting issue in SvgSanitizer. Users with the FAQEDIT permission could exploit XML DTD custom entities to...

Mage OSS Improper Exception Handling Vulnerability

Mage OSS 0.9.80 and earlier versions have a vulnerability related to improper exception handling. This vulnerability arises from continuing to create sessions when encountering an unknown OAuth provider, which may lead to unauthorized session creation...

Go-Vikunja Vikunja session mechanism issues

go-vikunja Vikunja versions 0.22.0 to 2.7.0 had a session mechanism vulnerability. This vulnerability stemmed from improper access revocation. In this issue, collaborators who have been revoked can still receive task titles and descriptions through the webhook they created, including content...

Go-Vikunja Vikunja session mechanism issues

In versions of go-vikunja from 2.3.0 to 2.7.0, there was a vulnerability related to the session mechanism. This vulnerability occurred because handleAuth did not recheck the JWT sid claim and the sessions table. As a result, WebSocket access remained valid after the session was revoked. Attackers...

SUSE CVE-2026-109527

The Model Context Protocol Python SDK is the official Python SDK for Model Context Protocol servers and clients. In mcp versions before 1.29.1 and from 2.0.0a1 through 2.0.1, the Streamable HTTP session manager, SSE message endpoint, and OAuth authorization-server routes buffer complete HTTP...

OESA-2026-4318 gi-docgen security update

GI-DocGen is a document generator for GObject-based libraries. GObject is the base type system of the GNOME project. GI-Docgen reuses the introspection data generated by GObject-based libraries to generate the API reference of these libraries, as well as other ancillary documentation. Security...

OESA-2026-4319 gi-docgen security update

GI-DocGen is a document generator for GObject-based libraries. GObject is the base type system of the GNOME project. GI-Docgen reuses the introspection data generated by GObject-based libraries to generate the API reference of these libraries, as well as other ancillary documentation. Security...

OESA-2026-4317 gi-docgen security update

GI-DocGen is a document generator for GObject-based libraries. GObject is the base type system of the GNOME project. GI-Docgen reuses the introspection data generated by GObject-based libraries to generate the API reference of these libraries, as well as other ancillary documentation. Security...

OESA-2026-4316 gi-docgen security update

GI-DocGen is a document generator for GObject-based libraries. GObject is the base type system of the GNOME project. GI-Docgen reuses the introspection data generated by GObject-based libraries to generate the API reference of these libraries, as well as other ancillary documentation. Security...

CVE-2026-19864

A flaw was found in Eclipse Jetty. The session authentication mechanism retains user credentials in session objects, which can cause plaintext passwords to be written to persistent storage when authenticated sessions are saved. An attacker with read access to the persistent session data store can...

CVE-2026-19600

Mattermost versions 11.9.x <= 11.9.1 , 11.8.x <= 11.8.5 , 11.7.x <= 11.7.10 , and 11.10.x

CVE-2026-95686

The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'targetUrl' parameter in all versions up to, and including, 1.9.2.1 due to insufficient input sanitization and...

Insufficient Session Expiration

Overview apache-airflow-providers-keycloak is a Provider package apache-airflow-providers-keycloak for Apache Airflow Affected versions of this package are vulnerable to Insufficient Session Expiration via KeycloakJWTMiddleware.dispatch in middleware.py, where the middleware unconditionally issue...

BASM (Broken Authentication & Session Management) io.netty:netty-handler Dependency in Confluence Data Center

This is a vulnerability in a non-Atlassian Confluence dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity BASM Broken Authentication & Session Management vulnerability was introduced in versions 7.0.1, 7.1.0, 7.2.0, 7.3.1,...

BASM (Broken Authentication & Session Management) org.apache.tomcat:tomcat-catalina Dependency in Confluence Data Center

This is a vulnerability in a non-Atlassian Confluence dependency. Atlassian's application of this dependency presents a lower, non-critical assessed risk. This Critical severity BASM Broken Authentication & Session Management vulnerability was introduced in versions 7.2.0, 7.3.1, 7.4.0, 7.5.0,...

BASM (Broken Authentication & Session Management) org.apache.sshd:sshd-core Dependency in Crucible Server

This High severity BASM Broken Authentication & Session Management vulnerability was introduced in version 4.9.0 of Crucible Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.1 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N allow...

BASM (Broken Authentication & Session Management) org.apache.sshd:sshd-core Dependency in Crucible Server

This Critical severity BASM Broken Authentication & Session Management vulnerability was introduced in version 4.9.0 of Crucible Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 9.1 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N...

EUVD-2026-102522

The Apache Airflow Keycloak auth manager did not end the session on logout: the logout route revoked the presented token, but KeycloakJWTMiddleware then issued a new, unrevoked token on the same response, so the user stayed logged in. Deployments using the Keycloak auth manager are affected: afte...

EUVD-2026-102475

Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability in HolidayAction.php that allows authenticated users to inject scripts via unescaped holiday names rendered as HtmlString. Attackers permitted to create Public Holidays or Mandatory Days can store JavaScript payloads th...

PT-2026-116178

Name of the Vulnerable Software and Affected Versions Mage OSS versions prior to 0.9.80 commit 76c4f46 Description The software allows session creation to proceed even when an unknown OAuth provider is encountered. OAuth Open Authorization is a standard that allows a website or application to...